Witam,
Otwórz notatnik systemowy i wklej:
Task: {10DC1A43-AC53-4086-82A8-F1355D000ACD} - System32\Tasks\b87f849a-e651-42af-9489-c2a697c94b2b-5_user = C:\Program Files\iWebar\b87f849a-e651-42af-9489-c2a697c94b2b-5.exe ==== ATTENTION
Task: {135B22C9-8CD1-45D4-8DE8-C90DA2EA57BA} - System32\Tasks\b87f849a-e651-42af-9489-c2a697c94b2b-5 = C:\Program Files\iWebar\b87f849a-e651-42af-9489-c2a697c94b2b-5.exe ==== ATTENTION
Task: {17491498-D860-47F7-ACDE-3BD552114312} - System32\Tasks\910ff260-db96-4bac-b468-08ab6045af79-5_user = C:\Program Files\Object Browser\910ff260-db96-4bac-b468-08ab6045af79-5.exe ==== ATTENTION
Task: {2C8B9A7E-E962-4D81-8526-1B6B11ED3D23} - System32\Tasks\Microsoft\Windows\Multimedia\SMupdate3 = Rundll32.exe C:\PROGRA~1\COMMON~1\System\SysMenu.dll ,Command701 update3 ==== ATTENTION
Task: {4029CD71-6D35-4908-A90B-90C974ADBA42} - System32\Tasks\b87f849a-e651-42af-9489-c2a697c94b2b-6 = C:\Program Files\iWebar\b87f849a-e651-42af-9489-c2a697c94b2b-6.exe ==== ATTENTION
Task: {402BCD11-CE2E-4DC1-BFD5-DBF0F43DD4A1} - \Update Service YourFileDownloader No Task File ==== ATTENTION
Task: {432FAA41-04BA-4F1F-93D0-B2A433ACDE60} - System32\Tasks\{51F18496-F6BC-43E0-AF21-EA72E27CAE96} = Chrome.exe http://ui.skype.com/ui/0/6.22.81.104/en/abandoninstall?source=lightinstalleramp;page=tsMain
Task: {4917A4EC-1C50-47AB-B9AD-752566F75514} - System32\Tasks\910ff260-db96-4bac-b468-08ab6045af79-6 = C:\Program Files\Object Browser\910ff260-db96-4bac-b468-08ab6045af79-6.exe ==== ATTENTION
Task: {54D1D9D7-39CD-4669-B5EF-B1432603717E} - System32\Tasks\b87f849a-e651-42af-9489-c2a697c94b2b-7 = C:\Program Files\iWebar\b87f849a-e651-42af-9489-c2a697c94b2b-7.exe ==== ATTENTION
Task: {55EDC6F5-7F97-473B-A29B-03007E2905A8} - System32\Tasks\910ff260-db96-4bac-b468-08ab6045af79-1-7 = C:\Program Files\Object Browser\910ff260-db96-4bac-b468-08ab6045af79-1-7.exe ==== ATTENTION
Task: {60380102-5EEB-4C74-A753-C7C5D1F1CABC} - System32\Tasks\Microsoft\Windows\Maintenance\SMupdate2 = Rundll32.exe C:\PROGRA~1\COMMON~1\System\SysMenu.dll ,Command701 update2 ==== ATTENTION
Task: {652298B1-55D7-485F-9705-E2610C6FF942} - \YTDownloaderUpd No Task File ==== ATTENTION
Task: {6966A619-C193-4A04-987C-5C59ED419CF4} - \YTDownloader No Task File ==== ATTENTION
Task: {6B65449A-4057-4624-8D54-C75FFA85449B} - System32\Tasks\AXWMMZ = C:\Users\Piotrek\AppData\Roaming\AXWMMZ.exe ==== ATTENTION
Task: {6FF1580E-AE36-413A-9344-C84BC9229CE6} - System32\Tasks\b87f849a-e651-42af-9489-c2a697c94b2b-1-6 = C:\Program Files\iWebar\b87f849a-e651-42af-9489-c2a697c94b2b-1-6.exe ==== ATTENTION
Task: {70E63381-A9C0-4B9B-8309-A662E963EBEE} - \Microsoft\Windows\Windows Activation Technologies\ValidationTask No Task File ==== ATTENTION
Task: {73B8004C-4E87-495F-8DE5-404AAFD69B6E} - System32\Tasks\{859B1B5E-9154-4C1B-8451-0CE0743CE363} = pcalua.exe -a C:\Users\Piotrek\AppData\Roaming\mystartsearch\UninstallManager.exe -c -ptid=amt
Task: {73DBEC40-9D4D-4490-91D4-C53C3AC2FDBE} - System32\Tasks\910ff260-db96-4bac-b468-08ab6045af79-7 = C:\Program Files\Object Browser\910ff260-db96-4bac-b468-08ab6045af79-7.exe ==== ATTENTION
Task: {91EE0D25-E8C2-43D3-996F-A10E160561EB} - System32\Tasks\{B1B679ED-4806-4806-9E12-3B6C77324B92} = Chrome.exe http://ui.skype.com/ui/0/5.5.0.124/en/exitsurvey?uhash1=a0986afd4470d3a14b792a0340d6947aamp;uhash2=920bcaf415e7a54daf21acc5bd9907ceamp;uhash3=c36ad720e2cfb9b2444c1a4b35f42b1damp;uhash4=ed9193c3689edb480ee776d249faeebaamp;uhash5=2de0efb91021c3330608029f09e92ba3
Task: {96830E05-4DCF-4D40-9FAF-A94593C6C027} - System32\Tasks\b87f849a-e651-42af-9489-c2a697c94b2b-1-7 = C:\Program Files\iWebar\b87f849a-e651-42af-9489-c2a697c94b2b-1-7.exe ==== ATTENTION
Task: {A39D4FCC-7F18-4077-BFD7-04A2CA5220C0} - \SMupdate1 No Task File ==== ATTENTION
Task: {A7FE8B04-F4BA-416C-AB44-08FF04FD1127} - System32\Tasks\910ff260-db96-4bac-b468-08ab6045af79-1-6 = C:\Program Files\Object Browser\910ff260-db96-4bac-b468-08ab6045af79-1-6.exe ==== ATTENTION
Task: {C6DBC0E1-7AB8-4EE2-9BD1-625E3FB09E04} - \Microsoft\Windows\Windows Activation Technologies\ValidationTaskDeadline No Task File ==== ATTENTION
Task: {E03FB815-1EE1-4246-8FEB-E0851F9A7731} - System32\Tasks\910ff260-db96-4bac-b468-08ab6045af79-5 = C:\Program Files\Object Browser\910ff260-db96-4bac-b468-08ab6045af79-5.exe ==== ATTENTION
Task: C:\Windows\Tasks\910ff260-db96-4bac-b468-08ab6045af79-1-6.job = C:\Program Files\Object Browser\910ff260-db96-4bac-b468-08ab6045af79-1-6.exe ==== ATTENTION
Task: C:\Windows\Tasks\910ff260-db96-4bac-b468-08ab6045af79-1-7.job = C:\Program Files\Object Browser\910ff260-db96-4bac-b468-08ab6045af79-1-7.exe ==== ATTENTION
Task: C:\Windows\Tasks\910ff260-db96-4bac-b468-08ab6045af79-5.job = C:\Program Files\Object Browser\910ff260-db96-4bac-b468-08ab6045af79-5.exe ==== ATTENTION
Task: C:\Windows\Tasks\910ff260-db96-4bac-b468-08ab6045af79-5_user.job = C:\Program Files\Object Browser\910ff260-db96-4bac-b468-08ab6045af79-5.exe ==== ATTENTION
Task: C:\Windows\Tasks\910ff260-db96-4bac-b468-08ab6045af79-6.job = C:\Program Files\Object Browser\910ff260-db96-4bac-b468-08ab6045af79-6.exe ==== ATTENTION
Task: C:\Windows\Tasks\910ff260-db96-4bac-b468-08ab6045af79-7.job = C:\Program Files\Object Browser\910ff260-db96-4bac-b468-08ab6045af79-7.exe ==== ATTENTION
Task: C:\Windows\Tasks\AXWMMZ.job = C:\Users\Piotrek\AppData\Roaming\AXWMMZ.exe ==== ATTENTION
Task: C:\Windows\Tasks\b87f849a-e651-42af-9489-c2a697c94b2b-1-6.job = C:\Program Files\iWebar\b87f849a-e651-42af-9489-c2a697c94b2b-1-6.exe ==== ATTENTION
Task: C:\Windows\Tasks\b87f849a-e651-42af-9489-c2a697c94b2b-1-7.job = C:\Program Files\iWebar\b87f849a-e651-42af-9489-c2a697c94b2b-1-7.exe ==== ATTENTION
Task: C:\Windows\Tasks\b87f849a-e651-42af-9489-c2a697c94b2b-5.job = C:\Program Files\iWebar\b87f849a-e651-42af-9489-c2a697c94b2b-5.exe ==== ATTENTION
Task: C:\Windows\Tasks\b87f849a-e651-42af-9489-c2a697c94b2b-5_user.job = C:\Program Files\iWebar\b87f849a-e651-42af-9489-c2a697c94b2b-5.exe ==== ATTENTION
Task: C:\Windows\Tasks\b87f849a-e651-42af-9489-c2a697c94b2b-6.job = C:\Program Files\iWebar\b87f849a-e651-42af-9489-c2a697c94b2b-6.exe ==== ATTENTION
Task: C:\Windows\Tasks\b87f849a-e651-42af-9489-c2a697c94b2b-7.job = C:\Program Files\iWebar\b87f849a-e651-42af-9489-c2a697c94b2b-7.exe ==== ATTENTION
AlternateDataStreams: C:\Windows:CM_3e53f1ae8aeac5c06eb4378cb7386837d9c150d64a2c122900d177f4291b8f44
AlternateDataStreams: C:\Windows:CM_c2986856d7c9e46b7e48286713fc3fbf1b63250f299cf6af0187bb7773e36fe2
HKU\S-1-5-21-1316306261-236752284-441742803-1000\...\RunOnce: [Adobe Speed Launcher] = 1427308933
HKU\S-1-5-21-1316306261-236752284-441742803-1000\...\Policies\Explorer: []
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction ======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.mystartsearch.com/web/?type=dsts=1425244315from=amtuid=HitachiXHTS545032B9A300_100426PBNC001YKGADDSXq={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.mystartsearch.com/web/?type=dsts=1425244315from=amtuid=HitachiXHTS545032B9A300_100426PBNC001YKGADDSXq={searchTerms}
HKU\S-1-5-21-1316306261-236752284-441742803-1000\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.mystartsearch.com/web/?type=dsppts=1425244334from=amtuid=HitachiXHTS545032B9A300_100426PBNC001YKGADDSXq={searchTerms}
HKU\S-1-5-21-1316306261-236752284-441742803-1000\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-1316306261-236752284-441742803-1000\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.mystartsearch.com/web/?type=dsppts=1425244334from=amtuid=HitachiXHTS545032B9A300_100426PBNC001YKGADDSXq={searchTerms}
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL =
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-1316306261-236752284-441742803-1000 - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL =
CHR Extension: (SweetPacks Chrome Extension) - C:\Users\Piotrek\AppData\Local\Google\Chrome\User Data\Default\Extensions\ogccgbmabaphcakpiclgcnmcnimhokcj [2014-06-04]
CHR HKLM\...\Chrome\Extension: [jbpkiefagocgkmemidfngdkamloieekf] - C:\Program Files\TornTV.com\torn10.crx [Not Found]
CHR HKLM\...\Chrome\Extension: [jcdgjdiieiljkfkdcloehkohchhpekkn] - C:\Users\Piotrek\AppData\Local\Google\Chrome\User Data\Default\External Extensions\{EEE6C373-6118-11DC-9C72-001320C79847}\SweetFB.crx [2012-11-26]
CHR HKLM\...\Chrome\Extension: [jplinpmadfkdgipabgcdchbdikologlh] - C:\Program Files\1ClickDownload\1click11.crx [Not Found]
CHR HKLM\...\Chrome\Extension: [ogccgbmabaphcakpiclgcnmcnimhokcj] - C:\Users\Piotrek\AppData\Local\Google\Chrome\User Data\Default\External Extensions\{EEE6C373-6118-11DC-9C72-001320C79847}\SweetNT.crx [2012-11-26]
S2 Texis Monitor; D:\Abaqus\Documentation\monitor.exe [X]
U3 ae19hikr; C:\Windows\system32\Drivers\ae19hikr.sys [0] (Microsoft Corporation) ==== ATTENTION (zero size file/folder)
S3 ipswuio; System32\DRIVERS\ipswuio.sys [X]
S1 iSafeKrnlMon; \\C:\Program Files\Elex-tech\YAC\iSafeKrnlMon.sys [X]
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
U3 tmlwf; No ImagePath
U3 tmwfp; No ImagePath
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
2015-01-25 17:12 - 2015-01-25 17:12 - 0001248 _____ () C:\Users\Piotrek\AppData\Roaming\AXWMMZ
EmptyTemp:
Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze.
Pomogło, dziękuję.
Skasuj folder C:\FRST